Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/0f01aa53-42e4-357c-8fc5-7410e2aa335f.roa
File:                     0f01aa53-42e4-357c-8fc5-7410e2aa335f.roa (raw, json)
Hash identifier:          gAdaTOJcHsH7rFeIFsNUiGoSI7YsA6+JlbN2FGzQA+0=
Subject key identifier:   9A:A5:13:B3:2A:A1:33:02:FD:17:4A:BF:21:2E:00:D7:F1:DD:DA:39
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F432858485B6AFD0AC88A43B8C4A01600
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/0f01aa53-42e4-357c-8fc5-7410e2aa335f.roa
Signing time:             Sat 28 Dec 2024 14:00:52 +0000
ROA not before:           Sat 28 Dec 2024 14:00:52 +0000
ROA not after:            Fri 28 Mar 2025 13:00:52 +0000
asID:                     3257
IP address blocks:        75.78.36.0/24 maxlen: 24
                          75.78.37.0/24 maxlen: 24
                          75.78.160.0/22 maxlen: 22
                          75.78.164.0/22 maxlen: 22
                          75.78.168.0/22 maxlen: 22
                          75.78.176.0/24 maxlen: 24
                          75.78.177.0/24 maxlen: 24
                          75.78.178.0/24 maxlen: 24
                          75.78.179.0/24 maxlen: 24
                          75.78.180.0/24 maxlen: 24
                          75.78.182.0/24 maxlen: 24
                          75.78.183.0/24 maxlen: 24
                          75.78.184.0/22 maxlen: 22
                          75.78.227.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5b:6a:fd:0a:c8:8a:43:b8:c4:a0:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Dec 28 14:00:52 2024 GMT
            Not After : Mar 28 13:00:52 2025 GMT
        Subject: CN=98e0ece7-9f29-4e42-a5b6-f4a0e5638718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:52:18:87:7d:8d:9b:2b:6a:83:9e:b7:16:02:
                    2a:82:09:7d:c2:2a:20:0e:ec:a7:5c:9f:98:db:d8:
                    43:53:59:79:1d:ae:ff:b6:e4:6e:09:d2:ca:f8:ac:
                    9b:0e:39:53:7e:bb:ba:d5:3b:d2:2b:d8:12:76:5a:
                    ee:e0:1f:72:4b:d8:b4:b4:14:ef:c2:44:85:40:c9:
                    22:98:21:37:be:eb:1c:29:19:24:16:b7:c6:70:5a:
                    07:0b:5e:f4:8f:67:3d:c7:a6:d5:fa:35:2b:1b:0c:
                    fe:0f:97:3a:80:bc:8b:35:e0:bc:a4:4f:bf:bd:27:
                    c9:61:90:43:14:4b:e6:5e:ac:0e:14:6d:0b:3f:f7:
                    32:1a:c1:ac:fb:b6:74:a5:d2:1a:d3:c9:91:71:9a:
                    d4:12:73:25:52:ad:c9:ad:d8:a7:18:a1:e3:26:98:
                    2f:b2:1f:e0:1e:51:65:f8:71:ba:b9:27:70:81:0b:
                    d9:b4:34:60:57:43:0e:42:f3:1b:51:b2:89:21:97:
                    d6:6c:a9:bb:e8:d4:9e:5a:6d:91:29:2a:61:6f:f9:
                    4a:49:6e:05:1f:91:8e:33:fb:99:46:40:57:0f:41:
                    f1:75:c9:be:33:3b:50:8b:11:b5:87:73:0b:49:4c:
                    10:32:e8:af:3f:16:cc:ec:f3:39:97:c5:c9:ae:3f:
                    d4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A5:13:B3:2A:A1:33:02:FD:17:4A:BF:21:2E:00:D7:F1:DD:DA:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/0f01aa53-42e4-357c-8fc5-7410e2aa335f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.36.0/23
                  75.78.160.0-75.78.171.255
                  75.78.176.0-75.78.180.255
                  75.78.182.0-75.78.187.255
                  75.78.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:e7:a3:fc:85:32:d4:ff:77:3d:19:92:8d:ce:c5:db:a7:8d:
         23:28:d1:93:cd:9f:6f:66:db:4a:78:37:bb:6e:0d:5a:ff:a3:
         15:50:1a:cc:6c:e2:17:8d:68:90:b2:24:08:ce:ca:7f:b7:18:
         3d:f8:69:7f:96:35:4b:35:33:fd:b6:1b:c0:f4:02:d1:14:5f:
         1c:d1:0e:ec:8b:52:56:9b:ad:f6:28:80:f0:d3:8c:9b:35:32:
         2d:0e:63:ca:15:aa:ee:57:05:4a:ba:a7:d9:f5:f1:cd:44:af:
         31:ec:89:25:39:b7:60:56:2e:03:82:be:0c:d4:06:92:55:75:
         68:47:8d:26:aa:07:ff:8c:05:56:56:f3:02:c6:64:78:da:51:
         cf:4d:1e:b3:e1:b1:7c:95:2d:8f:13:28:3d:f5:c0:f3:61:54:
         fe:53:3b:ce:90:14:1d:a6:94:c9:15:ff:2e:6f:68:07:01:df:
         0a:a3:8b:a5:15:30:0a:f3:6a:3b:dd:43:0f:7f:9e:6f:51:8b:
         2b:98:1e:8d:99:25:23:6f:d7:ce:81:3d:e0:28:f3:d2:06:95:
         4d:af:62:85:9d:23:51:a2:42:c0:32:d6:a5:50:1c:80:37:e0:
         66:e6:8b:9a:1a:7d:31:59:8a:9f:83:87:34:1a:81:7d:fa:64:
         04:cb:69:3c
-----BEGIN CERTIFICATE-----
MIIGczCCBVugAwIBAgIUAQ0Mn0MoWEhbav0KyIpDuMSgFgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzhjNTI1NWYtNTE5My00ZWY3LTkyZTktZGIzMjZlZTFk
NjkwMB4XDTI0MTIyODE0MDA1MloXDTI1MDMyODEzMDA1MlowLzEtMCsGA1UEAxMk
OThlMGVjZTctOWYyOS00ZTQyLWE1YjYtZjRhMGU1NjM4NzE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlIYh32Nmytqg563FgIqggl9wiogDuynXJ+Y
29hDU1l5Ha7/tuRuCdLK+KybDjlTfru61TvSK9gSdlru4B9yS9i0tBTvwkSFQMki
mCE3vuscKRkkFrfGcFoHC170j2c9x6bV+jUrGwz+D5c6gLyLNeC8pE+/vSfJYZBD
FEvmXqwOFG0LP/cyGsGs+7Z0pdIa08mRcZrUEnMlUq3JrdinGKHjJpgvsh/gHlFl
+HG6uSdwgQvZtDRgV0MOQvMbUbKJIZfWbKm76NSeWm2RKSphb/lKSW4FH5GOM/uZ
RkBXD0Hxdcm+MztQixG1h3MLSUwQMuivPxbM7PM5l8XJrj/UVQIDAQABo4IDhTCC
A4EwHQYDVR0OBBYEFJqlE7MqoTMC/RdKvyEuANfx3do5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1
MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMyNmVlMWQ2OTAvMGYwMWFhNTMtNDJlNC0z
NTdjLThmYzUtNzQxMGUyYWEzMzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhjNTI1NWYtNTE5My00ZWY3LTky
ZTktZGIzMjZlZTFkNjkwLzM4YzUyNTVmLTUxOTMtNGVmNy05MmU5LWRiMzI2ZWUx
ZDY5MC5jcmwwHwYDVR0jBBgwFoAU6OtRdt4L2VYIX2NOD0gHny6QnZUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMy
NmVlMWQ2OTAuY2VyME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQBS04kMAwD
BAVLTqADBAJLTqgwDAMEBEtOsAMEAEtOtDAMAwQBS062AwQCS064AwQAS07jMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD7no/yFMtT/dz0Zko3OxdunjSMo0ZPNn29m20p4N7tuDVr/oxVQGsxs
4heNaJCyJAjOyn+3GD34aX+WNUs1M/22G8D0AtEUXxzRDuyLUlabrfYogPDTjJs1
Mi0OY8oVqu5XBUq6p9n18c1ErzHsiSU5t2BWLgOCvgzUBpJVdWhHjSaqB/+MBVZW
8wLGZHjaUc9NHrPhsXyVLY8TKD31wPNhVP5TO86QFB2mlMkV/y5vaAcB3wqji6UV
MArzajvdQw9/nm9RiyuYHo2ZJSNv186BPeAo89IGlU2vYoWdI1GiQsAy1qVQHIA3
4Gbmi5oafTFZip+DhzQagX36ZATLaTw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:40:34 2025 by rpki-client